#microsoft


Microsoft Teams will let admins block custom file extensions

Sep 19, 2026 // 00:02

Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with malware and security threats to meet their company’s security requirements. […]

Secure enterprise sharing with access reviews for Microsoft 365

Sep 19, 2026 // 00:02

Collaboration suites like M365 offer unparalleled convenience. Millions of teams rely on them to quickly share documents with coworkers, clients and business partners. Yet when […]

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Sep 13, 2026 // 13:21

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using […]

Passkey-themed phishing attacks lead to Microsoft 365 data theft

Sep 12, 2026 // 01:37

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts […]

New Microsoft Defender ‘ShieldCrash’ zero-day grants SYSTEM access

Sep 9, 2026 // 15:37

An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named “ShieldCrash” right after Microsoft rolled out its September […]

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Sep 9, 2026 // 10:51

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been […]

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

Sep 9, 2026 // 10:51

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed […]

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Sep 9, 2026 // 00:17

Today is Microsoft’s September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. This Patch Tuesday […]

Microsoft 365 Attackers Use Help Desk Vishing to Steal Data for Extortion

Sep 7, 2026 // 19:02

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that’s targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information […]

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

Sep 7, 2026 // 18:57

A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. Researchers […]

Previous 1 2 3 4 5 … 24 Next